application security architect

$145,600 - $156,000/Yr

Randstad - Boston, MA

Full-time - Mid Level

Boston, MA

Administrative and Support Services

About the position

The Application Security Architect role involves ensuring the security of software applications through comprehensive architecture reviews, security risk assessments, and the implementation of security best practices. The position requires expertise in securing containerized environments and API management, as well as managing open source vulnerabilities and implementing Runtime Application Self-Protection (RASP).

Responsibilities

• Conduct comprehensive architecture reviews of new software applications to identify security risks, propose mitigation strategies, and ensure alignment with security best practices.
• Perform Security Risk and Assessments (SRA) for critical applications, identifying potential vulnerabilities and recommending enhancements to strengthen security posture.
• Develop and maintain security policies and procedures related to application development and deployment.
• Secure container orchestration platforms such as OpenShift, and manage container runtime environments using Podman and Docker.
• Implement and manage API security solutions, with a preference for experience with MuleSoft and Traceable.
• Oversee the integration and management of open source security using NexusIQ or similar tools to identify and remediate vulnerabilities.
• Install, configure, and maintain Runtime Application Self-Protection (RASP) solutions, specifically Contrast Protect, to provide real-time application security.
• Collaborate with development teams to incorporate security considerations during the software development lifecycle (SDLC).
• Provide security guidance and training to development and operations teams to raise awareness and improve security practices.
• Stay current with emerging security threats, technologies, and regulations to ensure our applications and infrastructure remain secure.

Requirements

• Minimum 5 years of experience in application security and architecture reviews.
• Bachelor's degree in a relevant field.

Nice-to-haves

• Experience with MuleSoft and Traceable for API management.
• Familiarity with NexusIQ for managing open source vulnerabilities.
• Experience with container orchestration platforms like OpenShift, Podman, and Docker.

Benefits

• Health insurance coverage
• 401K contribution
• Incentive and recognition program